CVE-2024-1020 | Rebuild up to 3.5.5 /filex/proxy-download getStorageFile url cross site scripting

A vulnerability classified as problematic was found in Rebuild up to 3.5.5. Affected by this vulnerability is the function getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to cross site scripting.

This vulnerability is known as CVE-2024-1020. The attack can be launched remotely. Furthermore, there is an exploit available.